Week 41, 2018
8–14 October 2018
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 97%
- Critical 9.8 EPSS 18%
-
Critical 9.8
CVE-2018-14649 It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by setting debug=…EPSS 12%
- Critical 9.8 EPSS 4%
- Critical 9.8 EPSS 3.7%
-
Critical 9.8
CVE-2018-12542 Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external locationEPSS 2.2%
-
Critical 9.4
CVE-2018-5399 The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running and is confi…EPSS 2.1%
- Critical 9.8 EPSS 1.3%
- Critical 9.1
- Critical 9.1
- Critical 9.1
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 7.8
CVE-2018-8453 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…EPSS 70%
Microsoft · Windows Server 2019 · Windows Server 2016 · Windows Server 2012 R2
- Medium 6.1 EPSS 56%
-
Unscored
CVE-2018-8495 A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerability." This affects …EPSS 51%
Microsoft · Windows Server 2016 · Windows 10 · Windows 10 Servers
-
Unscored
CVE-2018-8413 A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution Vulnerab…EPSS 46%
Microsoft · Windows Server 2019 · Windows Server 2016 · Windows Server 2012 R2
-
Unscored
CVE-2018-17440 An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default on port 9000 and has hardcode…EPSS 38%
-
Unscored
CVE-2018-8423 A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." Thi…EPSS 32%
Microsoft · Windows Server 2019 · Windows Server 2016 · Windows Server 2012 R2
-
Unscored
CVE-2018-17888 NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which …EPSS 30%
-
Unscored
CVE-2018-15937 Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference …EPSS 28%
Advisories
- SUSE / openSUSE Security Updates 21
- Debian Security (DSA / DLA) 13
- CISA ICS & IT advisories 102 critical
- Oracle Linux Security Advisories (ELSA) 61 critical
- Ubuntu Security Notices (USN) 6
- Amazon Linux Security Center (ALAS) 3
- BSI CERT-Bund (WID) 3
- ICSA-18-284-02 NUUO CMS (Update A) 7 CVEs
- ICSA-18-284-01 NUUO NVRmini2 and NVRsolo 2 CVEs
- ELSA-2018-2884 Critical: firefox security update (Oracle Linux 7) 2 CVEs